[Pki-devel] Dogtag PKI is Python 3.4 compatible (mostly)

Christian Heimes cheimes at redhat.com
Mon Aug 17 07:01:07 UTC 2015


Hello,

Good news everybody! I got Dogtag's Python code working under Python
3.4. With my patches 24-38 I'm able to run pkispawn and pkidestroy under
Python 2.7 and 3.4 from the same code base. I was able to spawn a CA,
KRA and OCSP responder with Python 3.4 successfully.

There is still much work to do, though. I have neither tested the PKI
client API nor the upgrade framework. I also suspect problems with
non-ASCII paths and internationalized domain names. Packaging has to be
addressed, too.

I like to thank John and Miro for their hard work on Python 3 ports of
NSS and pyldap.


How to test under Python 3.4
----------------------------

Install Python 3 versions of Python dependencies:

# dnf install python3-lxml python3-sphinx python3-requests python3-six
libselinux-python3 policycoreutils3-python


Install build dependencies for pyldap and python-nss

# dnf install python-dnf-plugins-core python3-pip python-tox
# dnf builddep python-nss
# dnf builddep python-ldap


You also have to disable SELinux enforcement because seobject is missing:

# setenforce 0


Now you can use a tox virtual env to install the dependencies and test
the Python 3 port

$ tox -e py34 (ignore the error)
$ .tox/py34/bin/pip3.4 install pyldap
$ .tox/py34/bin/pip3.4 install
hg+https://fedorapeople.org/~jdennis/python-nss/repos/python-nss/
# .tox/py34/bin/python3.4 .tox/py34/bin/pkispawn

Christian

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 455 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/pki-devel/attachments/20150817/e296e9dc/attachment.sig>


More information about the Pki-devel mailing list